Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8a7c8fd9-33c8-3896-875f-f6567b317496.roa
File:                     8a7c8fd9-33c8-3896-875f-f6567b317496.roa (raw, json)
Hash identifier:          ryJ1xD2PDd27M6nIKViPL/DYixhXvF3vy82e273LYYo=
Subject key identifier:   E4:F5:D1:33:E8:69:78:35:20:F3:9B:97:09:67:1E:A0:4F:8D:AA:6A
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858485CD035FC057D22DFC8343480
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8a7c8fd9-33c8-3896-875f-f6567b317496.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        140.209.192.0/19 maxlen: 24
                          140.209.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:35:fc:05:7d:22:df:c8:34:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=fb9c4451-9460-464f-bd05-2598f25a16b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:34:fd:9d:da:fd:a7:86:7e:57:9e:7f:cf:e2:
                    a5:61:54:db:5b:68:cb:12:e8:c8:65:dd:ec:60:31:
                    57:48:41:7d:79:8c:c4:73:2d:8d:19:4b:5f:10:84:
                    8c:3f:a8:1b:7c:6d:20:30:d3:ed:22:a9:25:46:09:
                    ce:10:e4:3e:5e:4c:db:de:85:ca:b1:80:8f:ee:a0:
                    f8:bb:8d:19:b7:99:76:e7:0c:ad:e7:6b:a8:0f:8a:
                    b3:74:e8:fa:1a:bc:c4:79:43:5d:7a:21:73:28:43:
                    4d:b3:6f:03:fd:60:cb:c2:13:00:82:0d:39:64:73:
                    3d:12:ad:d2:f2:2f:0e:d7:a2:5f:3b:a0:74:dd:5c:
                    e0:62:a1:2d:d6:69:82:4c:69:c2:89:ad:8a:02:4e:
                    b6:99:36:a3:70:04:a6:1b:23:2a:13:3a:3c:7e:af:
                    d3:54:bf:18:2f:d8:7b:c0:b0:18:88:5f:51:1b:4f:
                    f7:ad:19:d6:f1:c3:fe:fd:ad:fc:7d:eb:5b:ac:55:
                    ba:c3:74:7f:e3:74:15:db:90:02:eb:66:12:19:7a:
                    32:81:02:2a:50:99:52:01:5e:05:28:ed:ad:fc:f2:
                    1a:f5:75:2d:58:d3:1d:39:1f:07:38:8e:aa:d1:9f:
                    b7:5d:b3:2b:90:fd:b5:30:22:8e:67:3c:1d:8b:db:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F5:D1:33:E8:69:78:35:20:F3:9B:97:09:67:1E:A0:4F:8D:AA:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8a7c8fd9-33c8-3896-875f-f6567b317496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.209.192.0-140.209.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e7:ce:3a:19:8e:f1:31:30:c3:87:c3:5e:f4:5d:15:46:3f:ae:
         a5:b9:f1:c5:17:45:cd:34:9f:16:da:7e:f3:9c:bd:68:47:9a:
         88:e8:61:40:d8:89:f1:39:e9:9b:2c:12:4e:cf:ea:a6:5d:f9:
         1c:29:e4:e4:a5:7d:e7:de:b3:e0:c7:7d:0f:78:91:33:5c:24:
         ef:df:dd:5d:4c:c3:49:5e:e0:cb:3a:d1:4e:1b:51:26:56:56:
         69:21:26:fa:32:3b:1d:ca:41:ee:31:b3:24:77:68:58:68:98:
         42:8b:71:2d:ef:cb:62:f3:65:38:88:28:85:74:86:6e:c9:28:
         4a:6d:e7:6e:58:8d:91:7d:17:b7:16:4d:ef:47:ff:4c:9f:7d:
         2d:b5:8a:f1:46:8f:20:1e:9e:13:b3:e8:6d:0a:95:ca:f6:39:
         cf:1a:77:48:16:05:44:e2:43:29:f7:37:65:8a:f3:4e:ed:7f:
         6c:19:5d:b2:71:e8:76:5e:44:1c:60:16:71:ae:7b:b0:af:17:
         36:99:f2:d0:15:1c:9c:bd:56:f6:d6:b0:3b:6e:d6:61:ed:2d:
         8d:5e:82:79:52:8a:30:ab:60:1f:8d:e2:36:71:66:8b:78:f8:
         dd:ce:c7:d5:c4:6f:7c:e8:ee:39:db:d4:ec:78:ea:31:7c:65:
         ba:71:df:c2
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEhc0DX8BX0i38g0NIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZmI5YzQ0NTEtOTQ2MC00NjRmLWJkMDUtMjU5OGYyNWExNmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TT9ndr9p4Z+V55/z+KlYVTbW2jLEujIZd3s
YDFXSEF9eYzEcy2NGUtfEISMP6gbfG0gMNPtIqklRgnOEOQ+Xkzb3oXKsYCP7qD4
u40Zt5l25wyt52uoD4qzdOj6GrzEeUNdeiFzKENNs28D/WDLwhMAgg05ZHM9Eq3S
8i8O16JfO6B03VzgYqEt1mmCTGnCia2KAk62mTajcASmGyMqEzo8fq/TVL8YL9h7
wLAYiF9RG0/3rRnW8cP+/a38fetbrFW6w3R/43QV25AC62YSGXoygQIqUJlSAV4F
KO2t/PIa9XUtWNMdOR8HOI6q0Z+3XbMrkP21MCKOZzwdi9ub8wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFOT10TPoaXg1IPOblwlnHqBPjapqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvOGE3YzhmZDktMzNjOC0z
ODk2LTg3NWYtZjY1NjdiMzE3NDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAaM0cAD
BASM0eAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEA5846GY7xMTDDh8Ne9F0VRj+upbnxxRdFzTSfFtp+85y9
aEeaiOhhQNiJ8TnpmywSTs/qpl35HCnk5KV9596z4Md9D3iRM1wk79/dXUzDSV7g
yzrRThtRJlZWaSEm+jI7HcpB7jGzJHdoWGiYQotxLe/LYvNlOIgohXSGbskoSm3n
bliNkX0XtxZN70f/TJ99LbWK8UaPIB6eE7PobQqVyvY5zxp3SBYFROJDKfc3ZYrz
Tu1/bBldsnHodl5EHGAWca57sK8XNpny0BUcnL1W9tawO27WYe0tjV6CeVKKMKtg
H43iNnFmi3j43c7H1cRvfOjuOdvU7HjqMXxlunHfwg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:40 2025 by rpki-client